Privacy Policy

The protection of the data and privacy of all current, former and future customers is an important concern of Netsuisse AG, Netsuisse Limited and Netsuisse International (Spain) S.L.U. (hereinafter collectively referred to as "NETSUISSE" or "Netsuisse Group"). For this reason, we ensure that your data, which is collected, processed and used during your visit to the NETSUISSE website and when using our mobile applications, is protected.

By accessing the NETSUISSE website or by using our applications, you accept our terms regarding the processing of personal data and agree to the procedures and provisions of this Privacy Policy.

This Privacy Policy may be updated at any time. We therefore recommend that you review it regularly.

This Privacy Policy applies to all data that the Netsuisse Group receives in connection with your use of the NETSUISSE website and our mobile applications (iOS and Android).

Our website and applications may contain links to third-party websites. This Privacy Policy does not apply to offerings under the control of third parties. Please refer to the privacy policies of the respective third parties.

On our website and in our applications, we collect two types of data:

Active data (e.g. name, postal address, email address, phone number, credit card information), to the extent that it is voluntarily submitted by the user for the purpose of registration, placing online orders or subscribing to an email newsletter.

Passive data (e.g. IP address, type of browser software or operating system used, pages visited including date and duration).

NETSUISSE does not at any time establish a connection between passive data and the personal data of the customer.

The processing of your personal data is carried out on the following legal bases:

Performance of a contract: To provide the services you have commissioned and to fulfil contracts.

Legitimate interests: To improve our offerings, to ensure the security of our systems and for internal analyses, to the extent that your interests do not override these.

Consent: Where you have given us explicit consent (e.g. to receive marketing communications). You may withdraw this consent at any time.

Legal obligation: To the extent that processing is necessary to fulfil legal obligations.

The data collected, in particular passive data, helps us understand how visitors use the NETSUISSE website and our applications. This enables us to manage our offerings and improve their usability.

We also use the data, in particular active data, for customer and user management and for marketing purposes. The use of your personal data takes place exclusively within the framework of applicable laws and regulations. You can decide at any time to no longer receive informational emails.

We use so-called tracking technologies such as cookies to collect data. You can set your browser to warn you before each tracking technology is used or to block such functions entirely. However, blocking may result in limited functionality.

We will not sell recorded data or make it available to third parties for a fee. Where the disclosure of data to third parties is necessary, we will, where possible, indicate this in advance and obtain your consent.

NETSUISSE may share your data with its own employees, representatives and partners. To provide services, we may share personal data with carefully selected third-party service providers who are obliged to comply with data protection requirements.

In the context of using our mobile applications, technically necessary data is transmitted to the following third-party providers:

Apple Inc., One Apple Park Way, Cupertino, CA 95014, USA – for push notifications via Apple Push Notification Service (APNs). The Data Privacy Framework (DPF) ensures an adequate level of data protection. Privacy Policy: https://www.apple.com/legal/privacy/

Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA – for push notifications via Firebase Cloud Messaging (FCM) and Android platform services. The Data Privacy Framework (DPF) ensures an adequate level of data protection. Privacy Policy: https://policies.google.com/privacy

Amazon Web Services (AWS), Amazon.com, Inc., 410 Terry Avenue North, Seattle, WA 98109, USA – for the operation of cloud infrastructure and services on which NETSUISSE systems and data are hosted. The Data Privacy Framework (DPF) ensures an adequate level of data protection. Privacy Policy: https://aws.amazon.com/privacy/

We may also disclose your data to authorities to the extent required by law or necessary for the enforcement of legal claims.

We process and store active data for as long as is necessary to fulfil our contractual and legal obligations, i.e. for the duration of the entire business relationship and beyond, in accordance with statutory retention and documentation obligations.

We store passive data for six months and then delete it.

In accordance with the Swiss Federal Act on Data Protection (FADP) and — where applicable — the EU General Data Protection Regulation (GDPR), you have the following rights:

Right of access: You may request information about the data we store about you at any time. Requests are generally answered within 30 days and free of charge.

Right to rectification: You may request the correction of inaccurate or incomplete data.

Right to erasure: You may request the deletion of your data under certain conditions.

Right to data portability: You may request that your data be transmitted to you or another controller in a structured, commonly used format.

Right to object: You may object to the processing of your data to the extent that it is based on legitimate interests.

Right to human review: In the case of automated decisions that significantly affect you, you have the right to request a human review.

Withdrawal of consent: Any consent given may be withdrawn at any time with effect for the future.

To exercise your rights, please contact: datenschutz(at)netsuisse.com or the postal address below. NETSUISSE is bound to verify the identity of the user when processing requests; requests must therefore be accompanied by appropriate proof of identity.

In the event of a data security breach that is likely to pose a high risk to your personal rights or fundamental rights, we will inform you — and, to the extent required by law, the Federal Data Protection and Information Commissioner (FDPIC) — as quickly as possible.

We use appropriate technical and organisational security measures to protect personal data against unauthorised access, accidental or intentional manipulation, loss and destruction. We ensure compliance with data protection regulations by all NETSUISSE employees, both contractually and through consistent training.

The Internet should generally not be regarded as a secure environment. Unauthorised third parties may access information you send over the Internet. Please note that we are not responsible for the security of your data during transmission to NETSUISSE over the Internet. We exclusively use valid SSL certificates.

This section applies in addition to the rest of the privacy policy for the mobile applications of NETSUISSE published in the Apple App Store, Google Play Store or other official app stores.

Push Notifications

When you enable push notifications, a device-specific token (device token) is generated and stored on our servers. This token is used to deliver notifications to you — on iOS via the Apple Push Notification Service (APNs), on Android via Google's Firebase Cloud Messaging service (FCM). You can disable push notifications at any time in your device's system settings.

Camera

The app may access your device's camera for the following purposes:

QR code scanning: For scanning QR codes as part of the app's features. No images are stored or transmitted in the process.

Photo capture: Images taken via the app are transmitted to the NETSUISSE servers in encrypted form and stored there.

Camera access only occurs when you actively use the respective feature. You can revoke camera permission at any time in your device settings.

Face ID / Touch ID / Biometric Authentication

The app supports biometric authentication using Face ID or Touch ID (iOS) or fingerprint or facial recognition (Android). Biometric data is processed and stored exclusively locally on your device (iOS: Secure Enclave; Android: TrustZone/StrongBox). NETSUISSE has no access to this data, and it is never transmitted to NETSUISSE or third parties.

API Tokens and Login Data

For authentication with our services, the app stores your login data and API tokens in encrypted form in the secure device storage — on iOS in the Keychain, on Android in EncryptedSharedPreferences or the Android Keystore. This data leaves your device exclusively as part of encrypted communication with the NETSUISSE servers.

Local App Settings

The app stores certain user settings (e.g. language preferences, display options) locally on your device. This data is not transmitted to NETSUISSE and remains on your device.

Permissions

The app only requests those permissions that are strictly necessary for the respective features. You can revoke granted permissions at any time in your device settings under "Privacy & Security" (iOS) or "App Permissions" (Android). This may restrict the availability of individual app features.

If you have questions about the processing of your personal data or wish to exercise your rights, please contact:

Netsuisse Group
Durisolstrasse 10
5612 Villmergen, Schweiz

Data Protection Officer: Thierry Kramis  |  info(at)netsuisse.com

This privacy policy is governed by Swiss law. All disputes are subject to the exclusive jurisdiction of the courts at the registered office of NETSUISSE.